inspec/test/unit/resources/aws_s3_bucket_object_test.rb

require 'helper'
require 'inspec/resource'
require 'resources/aws/aws_s3_bucket_object'

require 'resource_support/aws'
require 'resources/aws/aws_s3_bucket_object'

# MSBOSB = MockS3BucketObjectSingleBackend
# Abbreviation not used outside this file

#=============================================================================#
#                            Constructor Tests
#=============================================================================#
class AwsS3BucketObjectConstructor < Minitest::Test
  def setup
    AwsS3BucketObject::BackendFactory.select(AwsMSBOSB::Basic)
  end

  def test_constructor_no_args_raises
    assert_raises(ArgumentError) { AwsS3BucketObject.new }
  end

  def test_constructor_no_bucket_name_arg_raises
    assert_raises(ArgumentError) { AwsS3BucketObject.new(:key, 'key') }
  end

  def test_constructor_no_key_arg_raises
    assert_raises(ArgumentError) { AwsS3BucketObject.new(:bucket_name, 'bucket') }
  end

  def test_constructor_expected_well_formed_args
    AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'public_file.jpg')
  end

  def test_constructor_reject_unknown_resource_params
    assert_raises(ArgumentError) { AwsS3BucketObject.new(bla: 'NonExistingBucket') }
  end

  def test_constructor_reject_bucket_not_given
    assert_raises(ArgumentError) { AwsS3BucketObject.new(key: 'public_file.jpg') }
  end
  
  def test_constructor_reject_key_not_given
    assert_raises(ArgumentError) { AwsS3BucketObject.new(bucket_name: 'Public Bucket') }
  end
end

#=============================================================================#
#                               Recall
#=============================================================================#

class AwsS3BucketObjectRecallTest < Minitest::Test
  def setup
    AwsS3BucketObject::BackendFactory.select(AwsMSBOSB::Basic)
  end

  def test_searching
    assert(AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'public_file.jpg').exists?)
    refute(AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'NonExistingObject').exists?)
    refute(AwsS3BucketObject.new(bucket_name: 'NonExistingBucket', key: 'public_file.jpg').exists?)
  end
end

#=============================================================================#
#                               Properties
#=============================================================================#

class AwsS3BucketTestProperties < Minitest::Test
  def setup
    AwsS3BucketObject::BackendFactory.select(AwsMSBOSB::Basic)
  end

  #---------------------Bucket Name----------------------------#  
  def test_property_bucket_name
    assert_equal('Public Bucket', AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'public_file.jpg').bucket_name)
  end

  #--------------------- Key ----------------------------#  
  def test_property_key
    assert_equal('public_file.jpg', AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'public_file.jpg').key)
  end

  #---------------------- object_acl -------------------------------#
  def test_property_object_acl_structure
    object_acl = AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'public_file.jpg').object_acl

    assert_kind_of(Array, object_acl)
    assert(object_acl.size > 0)
    assert(object_acl.all? { |g| g.respond_to?(:permission)})
    assert(object_acl.all? { |g| g.respond_to?(:grantee)})
    assert(object_acl.all? { |g| g.grantee.respond_to?(:type)})
  end

  def test_property_object_acl_public
    bucket_acl = AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'public_file.jpg').object_acl
    
    public_grants = bucket_acl.select do |g|
      g.grantee.type == 'Group' && g.grantee.uri =~ /AllUsers/
    end
    refute_empty(public_grants)
  end

  def test_property_object_acl_private
    bucket_acl = AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'private_file.jpg').object_acl

    public_grants = bucket_acl.select do |g|
      g.grantee.type == 'Group' && g.grantee.uri =~ /AllUsers/
    end
    assert_empty(public_grants)
    
    auth_users_grants = bucket_acl.select do |g|
      g.grantee.type == 'Group' && g.grantee.uri =~ /AuthenticatedUsers/
    end
    assert_empty(auth_users_grants)
  end
end

#=============================================================================#
#                               Matchers
#=============================================================================#

class AwsS3BucketMatchersTest < Minitest::Test
  def setup
    AwsS3BucketObject::BackendFactory.select(AwsMSBOSB::Basic)
  end
  
  def test_matcher_public
    assert_equal(true, AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'public_file.jpg').public?)
    assert_equal(false, AwsS3BucketObject.new(bucket_name: 'Public Bucket', key: 'private_file.jpg').public?)
  end
end

#=============================================================================#
#                               Test Fixtures
#=============================================================================#

module AwsMSBOSB
  class Basic < AwsBackendBase
    def get_object_acl(query)
      buckets = {
        'Public Bucket' => OpenStruct.new({
          'public_file.jpg' => OpenStruct.new({
            :grants => [
              OpenStruct.new({
                'grantee' => OpenStruct.new({
                  type: 'CanonicalUser',
                }),
                permission: 'FULL_CONTROL',
              }),
              OpenStruct.new({
                'grantee' => OpenStruct.new({
                  type: 'AmazonCustomerByEmail',
                }),
                permission: 'READ',
              }),
              OpenStruct.new({
                'grantee' => OpenStruct.new({
                  type: 'Group',
                  uri: 'http://acs.amazonaws.com/groups/global/AllUsers'
                }),
                permission: 'READ',
              }),
            ]
          }),
          'private_file.jpg' => OpenStruct.new({
            :grants => [
              OpenStruct.new({
                'grantee' => OpenStruct.new({
                  type: 'CanonicalUser',
                }),
                permission: 'FULL_CONTROL',
              }),
            ]
          }),
        })
      }
      buckets[query[:bucket]][query[:key]]
    end
    
    def get_object(query)
      buckets = {
        'Public Bucket' => OpenStruct.new({
          'public_file.jpg' => OpenStruct.new({
          }),
          'private_file.jpg' => OpenStruct.new({
          }),
        })
      }
      bucket = buckets[query[:bucket]]
      raise Aws::S3::Errors::NoSuchBucket.new(Seahorse::Client::Http::Request, "Bucket does not exist") if bucket.nil?
      object = bucket[query[:key]]
      raise Aws::S3::Errors::NoSuchKey.new(Seahorse::Client::Http::Request, "Key does not exist") if object.nil?
      object
    end
  end
end